Hello,

after an epi update we noticed that our payment flow was changed.

Apparently -I assume during a commerce migrate step- a new payment method was added. 'Pay by phone' in the language es.
The new method was also enabled and set to default.

Isn't this a dangerous approach? Suddenly there was a payment method added which enabled free purchases on the shop.

If you start a project, you take the defaults into account. But once the development is started, you don't expect that new (enabled) payment methods are added automatically.

Suggestion, all configured payment methods are disabled by default.

I'm I correct? Or do you think there something wrong in our codebase.
I also could find these changes in the release notes.

Kind regards,

bob